Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ebc3311-b33d-4615-a5ea-53c023d8502e.roa
File:                     0ebc3311-b33d-4615-a5ea-53c023d8502e.roa (raw, json)
Hash identifier:          D+SZ7nOoSt24eJ6iGtqH/wrF+gJiA02pfF2P3GWqbSg=
Subject key identifier:   7F:BC:82:44:94:B6:BE:A4:CD:0B:AB:FA:BB:A1:80:0A:EA:98:F3:CB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3C5ABC51C8F47EDBD51483E22E8DAEF86103402F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ebc3311-b33d-4615-a5ea-53c023d8502e.roa
Signing time:             Thu 25 Sep 2025 17:51:57 +0000
ROA not before:           Thu 25 Sep 2025 17:51:57 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5a:bc:51:c8:f4:7e:db:d5:14:83:e2:2e:8d:ae:f8:61:03:40:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:51:57 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=55bccb823fc10f1a6225b375e0ad229d367ff6062f19ee37a5f0da6599daedbd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:3b:38:bf:40:b3:c6:9d:fd:d6:0e:d3:1d:
                    8f:cb:c3:5c:ce:a0:6a:d4:72:e5:cb:22:7b:17:c3:
                    14:34:7e:0f:d6:f4:1b:9c:e8:5f:72:e7:72:83:f7:
                    23:c0:6f:57:64:27:1c:74:4e:45:3d:4e:c9:17:90:
                    66:e7:0f:59:a2:2f:16:9c:48:9a:6c:f6:70:cd:16:
                    9f:05:88:fa:0f:74:56:eb:0e:eb:ba:26:ec:97:b8:
                    8d:a3:ac:b7:f9:6c:22:cf:5c:19:3f:86:8b:6f:c1:
                    27:11:59:05:8e:2b:b9:0d:8e:f9:63:ca:91:5b:a5:
                    03:e9:ff:5d:74:59:54:5f:4f:f7:91:e5:a3:4f:ff:
                    37:78:f1:fe:e2:02:e3:03:bd:1d:8d:49:17:d6:0f:
                    82:4b:f1:d8:e7:aa:da:53:5e:72:e5:cb:d7:0f:85:
                    40:af:c0:42:ca:33:2c:ce:d7:d6:b3:87:d3:67:51:
                    a5:bb:a5:a9:9c:5e:80:dd:ec:92:ce:43:3e:c8:59:
                    f2:cc:86:1f:d4:2f:9a:1f:ae:e1:16:fb:6c:7b:7c:
                    82:b7:71:49:60:f1:a7:ca:dd:c9:0c:b2:bc:29:34:
                    7e:e2:ee:0c:26:48:75:8c:3d:99:f0:91:32:17:af:
                    32:2d:dd:9d:57:fe:44:da:14:20:ec:f1:03:71:a9:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BC:82:44:94:B6:BE:A4:CD:0B:AB:FA:BB:A1:80:0A:EA:98:F3:CB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ebc3311-b33d-4615-a5ea-53c023d8502e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f9:10:d1:84:43:06:d2:a3:4e:0b:1f:8c:f1:6a:4c:04:f0:
         60:97:4e:8d:75:5c:5e:0c:fa:e7:58:e5:d1:bd:95:8a:29:ba:
         ad:18:7f:bd:29:47:2c:1d:4b:f1:f9:46:90:60:27:2c:b6:c6:
         89:3c:83:49:62:3a:b8:1e:a5:fc:5f:58:54:5a:ef:b1:d0:7f:
         20:53:c1:23:59:21:f3:49:2f:90:6c:aa:37:74:08:50:c8:68:
         d1:56:f1:da:8c:e9:03:cd:a5:db:72:ad:67:6c:7c:05:50:20:
         5b:0f:86:37:8e:19:fc:11:60:cc:19:a6:87:b3:05:45:2f:67:
         23:c9:78:75:bb:b5:bf:03:a8:8e:c1:84:e5:cf:69:5f:ea:42:
         62:89:ca:64:9f:0e:f9:a5:fd:f2:f8:d3:cc:6d:f1:96:9e:13:
         5a:99:14:0e:da:79:d7:c4:4b:62:10:78:cc:43:de:7a:33:b0:
         e8:5e:f7:f5:d4:df:a7:28:2d:07:52:0a:e8:a0:0e:61:68:da:
         62:6f:5c:bf:de:3a:f3:e3:41:5a:45:d6:8a:d5:f7:bd:b3:4f:
         1b:1f:d6:8c:db:55:80:6e:fd:e1:98:f2:3d:36:57:9a:dc:c0:
         f7:0d:77:5a:8e:17:5c:4a:40:e6:0d:1a:fb:61:60:7d:37:de:
         df:c5:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:42:44 2025 by rpki-client